General
-
Target
88f447dcd8067ca88ba4e2fc168cbacc5be5034be020fc5e1b4c86bb77e00fab.exe
-
Size
707KB
-
MD5
a06252f40cc3b641475d6455e7250023
-
SHA1
f407968e7246769b310d19a0330da6d0591b818f
-
SHA256
88f447dcd8067ca88ba4e2fc168cbacc5be5034be020fc5e1b4c86bb77e00fab
-
SHA512
cd6a907bac73c8b539e2ea87b5091dbedcdcb9ec3ebdfae4746f8bd55eda6d3281cae17bb640534a004ed164ad85e19f9733848d4b5bd4cdfe3be7be75e32abe
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1n8fvnh:6uaTmkZJ+naie5OTamgEoKxLWm3h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
88f447dcd8067ca88ba4e2fc168cbacc5be5034be020fc5e1b4c86bb77e00fab.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections